Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier: xVfKdKPTU31uVLM2K1RZbAD8BxS13axxkbjTSJQsUOQ=
Subject key identifier: 1E:C7:60:60:D8:E9:B6:55:5D:FC:CE:B1:4C:D2:8A:82:37:06:1B:51
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial: 0194BBCE4DD4979160FC725CCFE5AE3D9222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: XqCMPblhR3fcVTgqAp6Z3Q5gu6x1ptKRRtUWKb+cxSA=)
2: y4Dr14LmLQXVPFrGXXshyx64j84.roa (hash: 1bzHGlABR0e65obFVowAu77APqKznVv88s6eHNbebiQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4d:d4:97:91:60:fc:72:5c:cf:e5:ae:3d:92:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=1ec76060d8e9b6555dfcceb14cd28a8237061b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:68:68:6d:8e:ec:9b:4e:79:99:ed:d6:11:
32:53:57:29:1f:c0:5e:ef:68:8d:19:45:43:52:5b:
94:a7:a5:43:31:c4:52:83:5d:e6:3e:19:7f:79:d8:
e9:77:27:9b:ab:44:24:d3:07:25:5e:a4:d7:b0:0a:
b4:bd:c5:75:db:ab:6a:6a:bf:d2:97:7a:ba:4d:5d:
94:d9:5a:7c:fb:41:c0:66:06:e4:61:9b:e5:e9:40:
a2:2f:5c:60:6e:f9:75:84:2a:a9:b0:24:d0:01:16:
06:fe:db:6b:06:2a:ca:da:76:06:f7:aa:95:03:b8:
cd:d7:56:99:48:5b:c4:49:ba:22:85:a1:de:e8:2f:
71:30:8b:8f:dd:65:bc:87:3f:3b:1b:a1:b6:75:fa:
1f:52:a4:26:b7:81:7e:c2:98:e2:3a:d3:bb:82:2d:
09:a5:84:24:58:d5:94:34:6e:60:2f:7e:85:00:c4:
96:2b:00:97:88:92:e3:de:6d:68:44:18:ac:de:91:
80:2a:1b:e8:5a:44:e3:53:27:3c:c6:c8:d4:fb:11:
28:ab:d9:98:cf:eb:d3:a3:19:43:25:b7:85:9a:49:
66:ed:7d:ad:8c:81:05:85:0a:4f:77:64:25:25:55:
45:ba:17:0a:b0:65:e5:ca:5d:95:9b:73:98:6b:a0:
8c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C7:60:60:D8:E9:B6:55:5D:FC:CE:B1:4C:D2:8A:82:37:06:1B:51
X509v3 Authority Key Identifier:
keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:df:1b:25:e0:cc:11:70:ea:a1:54:9b:e3:48:df:ee:c9:f7:
ad:48:f0:b7:55:6d:6d:97:1e:59:30:2e:46:a6:4b:bd:ea:0f:
c9:a3:37:a6:65:59:b8:a7:fb:55:f8:ac:9e:4c:59:cd:81:99:
0f:86:03:c2:0d:c8:8e:5b:7c:1b:76:ac:d5:cb:bd:df:32:75:
bf:a9:94:e9:29:52:eb:e3:ee:e6:36:cb:60:f2:ec:e5:29:6a:
89:ad:ad:bc:03:81:27:2f:d9:79:ca:87:c5:b0:c8:ca:f5:80:
18:fc:ae:5b:69:d9:0e:2f:1f:03:bc:bd:1e:64:12:62:85:2e:
33:76:9c:56:79:69:ab:ae:5b:4f:05:16:77:a4:e8:e6:50:4e:
6c:15:0e:fb:a1:22:c0:a8:24:f4:f8:80:bc:6e:6a:90:e2:eb:
27:dc:a4:aa:14:7c:11:fa:ba:1f:f1:33:b7:64:9b:7c:39:6a:
30:65:90:c9:fa:c9:9a:39:03:74:c0:84:31:d7:d1:8b:43:67:
5d:85:e8:c5:cb:4b:02:7f:28:2e:87:57:f8:96:02:77:e8:24:
d5:04:7e:bd:02:d0:34:aa:b6:03:75:b7:4d:d4:af:bd:dd:25:
83:ff:6a:37:fb:5d:01:3d:60:3f:83:4e:ce:66:c1:d1:eb:da:
84:00:4a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:26 2025 by rpki-client